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PRIMARY- EXAMINER: Cangialosi; Salvatore 
ABSTRACT: 

Disclosed is a multi-purpose transaction card system comprising an issuer, one or 
more cards, one or more terminals, and optionally one or more acquires, 
communicating using a variety of cryptographic confidentiality and authentication 
methods. Cards authenticate messages using public key based cryptographic without 
themselves performing the extensive computations usually associated with such 
cryptography . Integrity of complex transaction sequences and plural card storage 
updates are maintained, even under intentionally generated interruptions and/or 
modifications of data transmitted between card and terminal. Cards do not reveal 
any information to the terminal which is not directly necessary for the transaction 
or any information to which the terminal should not have access, though externally 
measurable aspects of its behavior. Transaction types supported include those 
suitable for off-line credit cards, in which the "open to buy" is maintained on the 
card . 
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ART-UNIT: 222 

PRIMARY-EXAMINER: Barron, Jr.; Gilberto 
ATT Y-AGENT -FIRM: Hicks; Richard J . 

ABSTRACT: 

A cryptographic method for communication and electronic signatures is described. 
The system includes at least one encoding device coupled' to at least one decoding 
device by a communications channel. The method is a form of public-key or two-key 
cryptosystem, where the private decoding key is not feasibly determinable from the 
associated public encoding key. A block of ns bits of a message-to-be- transfer red M 
(or key- to-be-distributed) is enciphered to ciphertext by first mapping M to a set 
{x.sub.l, x.sub.2, . . . , x.sub.n }, where x.sub.i [0, 2-sup.s). Then the 
ciphertext {y.sub.l, y.sub.2, . . . , y.sub.m } is determined by ##EQU1## mod 
q.sub.j, for j=l to m f , and ##EQU2## for j=m T +l to m, where ##EQU3## The encoding 
key (associated with the intended receiver) consists of integers a.sub.ij, g.sub.j, 
and positive fractions f.sub.i, for i=l to n and for j=l to m, and positive 
integers q.sub.j, for j=l to m T . The ciphertext is deciphered (with a secret key 
known only to the intended receiver) by solving a knapsack ##EQU4## with secret 
supe rincreasing weights {b.sub.l, b.sub.2, . . . , b.sub.n } and target value 
b. ident . . vertline . w. sup . -1 . vertline . w T . sup . -1 y . ve rtline . . sub. Q . ve rtline . . sub . P , 
where y. ident . {y . sub . 1 , y.sub.2, . . . , y.sub.m } mod {q.sub.l, q.sub.2, . . . , 
q.sub.m }, ##EQU5## and w, w T , and {q.sub.m T +l, q.sub.m T +2, . . . , q.sub.m } are 
secret ' integers . The resulting terms {x'.sub.l, x T .sub.2, . . . , x'.sub.n } 
correspond to the original message terms {x.sub.l, x.sub.2, . . . , x.sub.n }. 
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